Related:
- If you are about to have sex with an extremely sketchy stranger you just met behind a dive bar, use a condom
- If you are about to open an extremely sketchy download you just torrented off a link on Dread, use a VM
Funny thing some malware checks if your hardware is virtualized. It is a bit tough to make a VM appear legit, so I tend to use a sacrificial laptop I have for this kind of work.
Your advise is good as it will tell you if the thing is real but the malware might not trigger.
My favourite story of this is that ransomware virus that was taking out places like the NHS, and some security researcher noticed it kept pinging some domain that was a random bunch of characters.
He registered the domain, and suddenly the ransomware shut down, freeing all the places the ransomware had infected.
It turns out when researching a virus the environments commonly treat all domains as valid so they can capture the traffic and see what the virus is doing. To prevent this, the ransomware was designed to shut down if this clearly fake domain came back as valid (and I guess this was the release switch if the ransom was paid). That was it would shut down if in this kind of a sandboxed environment.
The story is here, written by the researcher so it’s a bit technical. There were lots of news stories about it at the time too.
Add to this, use Linux when dealing with sketchy things that you downloaded from sketchy places. If you configured it correctly, it won’t be too difficult to undo any potential issues
What about Linux is easier than a similarly prepped windows device?
Unless it’s changed recently, windows you just need to press a button during load (like bios) to boot into safe mode. And from there you can reload a variety of “snapshots” to recover from most malware issues.
How is Linux easier than that, I don’t use Linux, but windows is incredibly simple already.
Mostly that the malware has a much higher chance of escaping containment on a Windows install, because it’s designed to attack Windows.
Do you not know what loading a recovery snap shot does? It doesn’t matter if it escapes. Whatever was new is removed since it’s restoring your harddrive to a previous state. It’s like a backup harddrive, without being external.
There’s ways for the malware to disable recovery mode, but I would assume the same could happen to Linux as well.
Boot into windows safe mode and load a recovery image? Are you implying that it’s somehow difficult on windows just to bash them?
VMs have vulnerabilities, if you really want to be safe use a dedicated air-gapped pc, or don’t run it at all.
I somewhat doubt the malware devs chucking their probably pirated copy of some cred stealer have implemented some zero day VM breakout exploit lol.
So do I, but there are enough people running out of date software that old vulnerabilities are still being actively exploited.
You sitting on some hypervisor zero days worth fucking millions over here to infect some idiot trying to run GTA6?
You have any idea how many people don’t update their computers?
“no one knows weather”
uhm theres a weather app on my phone right now and I can also just look outside the window…
Hahaha,remind me of the good old times
I wouldn’t be surprised if Rockstar is seeding the malware so people don’t trust the inevitable cracked game…
The leakers don’t just have footage, they have a playable build. One that appears mostly finished and in a relatively playable state. If it was before security stuff was added in, there may be no way to stop people from using it in single player, or even possibly using future versions of this build to cheat.
I didn’t realize how big of a deal this might be till this morning, I thought they just had footage that was about to be released, but this could end up costing rockstar billions in dollars.
Isn’t this a federal crime?
givessomefucks’ entire job on Lemmy is to spout absolute unhinged nonsense when they have no idea what they’re talking about – but to say it authoritatively enough that people believe them and to never go on the defensive when called out.
It’s completely insane.
From my understanding, the leakers do have a playable build. Not much is known though. What’s unhinged about this, and why would federal crime charges worry some guy that’s probably somewhere in Asia or eastern Europe behind an army of vpns. Most hacking and leaking we hear about isn’t legal.
Edit: oh the malware part, I get it. Ya that’s silly. I misunderstood the federal crime rebuttal.
I had no idea it expanded past their rant on how the dnc is improving AND any evidence to the contrary is just neoliberal propaganda
Oh yeah, most likely
Oh no, you’re right…
A billion dollar corporation would never commit a crime to maximize profits, obviously the swift hand of capitalism and federal regulations under Donald fucking trump would prevent any corporation from ever committing a crime.
I can’t believe I was that naive, thank you soooooooo much for reminding that a corporation would neeeeeeever commit an illegal act.
Whew…
I feel so much better now.
Guess they should release it on PC before we all just grab the hacked version